Oracle VM VirtualBox Core Component Privilege Escalation Vulnerability

Vulnerability

A vulnerability has been identified in the Oracle VM VirtualBox product, specifically in the Core component. This issue affects Oracle VM VirtualBox versions 7.1.14 and 7.2.4. The vulnerability allows a high-privileged attacker with access to the infrastructure where Oracle VM VirtualBox is running to compromise the application. Although the vulnerability exists within Oracle VM VirtualBox, successful exploitation could have a significant impact on other products, indicating a scope change. Exploitation of this vulnerability could lead to a complete takeover of Oracle VM VirtualBox.

Impact

Exploitation of this vulnerability can result in a complete takeover of Oracle VM VirtualBox, with potential significant impacts on additional products due to the scope change.

Added: Jan 20, 2026, 11:01 PM
Updated: Jan 20, 2026, 11:01 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
10.0
exploitability
2.8
remediation
0.0
relevance
2.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.